iptables -m layer7

ddaas · 07-25-2005, 07:28 AM

Hi,
I've tried to patch the 2.6.12.2 kernel in order to use the iptables -m layer7 classifier.

I followed the instructions from http://l7-filter.sourceforge.net/L7-HOWTO-Netfilter
1. download the kernel
2. apply the patch to the kernel
3. Compile + install the kernel
4. Boot with the new kernel
5. Download, patch and install iptables

Now when I try something like:

Code:

iptables -t mangle -A POSTROUTING -m layer7 --l7proto http -j MARK --set-mark 1

I get:

Code:

iptables v1.3.2: Couldn't load match `layer7':/usr/local/lib/iptables/libipt_layer7.so: cannot open shared object file: No such file or directory

I've searched on my system and there is no libipt_layer7.so file (or *layer7*).
What did I do wrong? The distro in slackware 10.1

Thanks for your help.

Capt_Caveman · 07-28-2005, 09:53 PM

Did you enable the "Experimental layer7 match" option in the kernel configuration step?
Did you use the right patches? (kernels older than 2.6.9 use different patches)
Did all the compile steps (kernel and iptables) work cleanly?